Off the top of my head, I can think of a QAD method to get the updates: install IE7 on a VM/VPC then connect to Windows Update. When you get the list of applicable updates, use the 'Administrator options' link to enable the downloading, rather than installation, of the hotfixes.